Client/ppanel-web
5
0
Fork 0
mirror of https://github.com/perfect-panel/ppanel-web.git synced 2026-02-06 03:30:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

🐛 fix(docker): Update Dockerfiles to create non-root user with proper permissions

Browse Source
This commit is contained in:
web@ppanel 2025-12-08 08:22:25 +00:00
parent d5d8d7e0df
commit 1bfebb698a
2 changed files with 15 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
docker/ppanel-admin-web/Dockerfile
View File

@ -5,17 +5,21 @@ FROM oven/bun:latest AS base
WORKDIR /app WORKDIR /app
# Create a non-root user for running the production application # Create a non-root user for running the production application
RUN addgroup --system --gid 1001 nodejs \ RUN apt-get update \
&& adduser --system --uid 1001 nextjs && apt-get install -y --no-install-recommends adduser \
&& rm -rf /var/lib/apt/lists/* \
# Change to non-root user && addgroup --system --gid 1001 nodejs \
USER nextjs && adduser --system --uid 1001 --ingroup nodejs --home /nonexistent --shell /usr/sbin/nologin nextjs
# Copy necessary files for production # Copy necessary files for production
COPY ./apps/admin/.next/standalone ./ COPY ./apps/admin/.next/standalone ./
COPY ./apps/admin/.next/static ./apps/admin/.next/static COPY ./apps/admin/.next/static ./apps/admin/.next/static
COPY ./apps/admin/public ./apps/admin/public COPY ./apps/admin/public ./apps/admin/public
# Change to non-root user
RUN chown -R nextjs:nodejs /app
USER nextjs
# Disable Next.js telemetry at runtime # Disable Next.js telemetry at runtime
ENV NEXT_TELEMETRY_DISABLED=1 ENV NEXT_TELEMETRY_DISABLED=1

10
docker/ppanel-user-web/Dockerfile
View File

@ -5,17 +5,19 @@ FROM oven/bun:latest AS base
WORKDIR /app WORKDIR /app
# Create non-root user and set permissions # Create non-root user and set permissions
RUN addgroup --system --gid 1001 nodejs \ RUN apt-get update \
&& adduser --system --uid 1001 nextjs && apt-get install -y --no-install-recommends adduser \
&& rm -rf /var/lib/apt/lists/* \
&& addgroup --system --gid 1001 nodejs \
&& adduser --system --uid 1001 --ingroup nodejs --home /nonexistent --shell /usr/sbin/nologin nextjs
# Copy build output and static files # Copy build output and static files
COPY ./apps/user/.next/standalone ./ COPY ./apps/user/.next/standalone ./
COPY ./apps/user/.next/static ./apps/user/.next/static COPY ./apps/user/.next/static ./apps/user/.next/static
COPY ./apps/user/public ./apps/user/public COPY ./apps/user/public ./apps/user/public
# Change ownership to non-root user # Change to non-root user
RUN chown -R nextjs:nodejs /app RUN chown -R nextjs:nodejs /app
USER nextjs USER nextjs
# Disable Next.js telemetry # Disable Next.js telemetry